Vendors / Metro Marketing Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 0
Exploited now Metro Marketing records in CISA KEV No Metro Marketing vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 26
Cookie Cart stores the password file under the web document root with insufficient access control, which allows remote attackers to obtain usernames and encrypted passwords via a direct request to passwd.txt.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01531 · Published 2005-05-24 · No fix listed
Priority LOW 26
Cookie Cart allows remote attackers to read the Order Notification list via the testmycgi and path parameters to testmy.cgi.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01548 · Published 2005-05-24 · No fix listed
Open these records in search → All records by CVSS severity
0 0 2 0 0
